tools/list-tokens: added optional 'username' parameter, to list tokens for a single user.
also changed output format to JSON.